Privacy Analyst II

Job Summary:

The Privacy Specialist supports the Global Privacy Office within the Allegis Group Legal Department.

Reporting to the Mgr.

Privacy Compliance, this role partners with cross-functional teams—including Third Party Risk Management, Procurement, Information Security, and Operating Company stakeholders across North America, EMEA, and APAC—to advance the organization's global data protection program.

The Privacy Specialist is responsible for third-party privacy vetting and data protection contract review, consent and preference management, privacy impact assessments, privacy notice management, data protection training delivery, and AI assessment support.

This is a hands-on, individual contributor role requiring independent judgment, strong collaboration skills, and the ability to navigate data protection requirements in a fast-paced environment.

In-Office Requirement:


* Required in-office presence at least 4 days per week

Responsibilities

Essential Functions:

 


* Partner with the Third Party Risk Management Team “TPRM” to evaluate third-party suppliers for data protection compliance

 


* Collaborate with the Procurement Team to draft, review, and prepare data protection language in supplier agreements, including conducting transfer impact assessments

 


* Conduct and support privacy impact assessments for Allegis Group Corporate Services departments, identifying risks

 


* Draft, implement, and manage privacy notices and cookie notices, ensuring alignment with applicable regulatory requirements and organizational standards across all regions

 


* Monitor developments in data protection regulations, including GDPR, CCPA/CPRA, and emerging frameworks, and translate regulatory changes into actionable recommendations

 


* Manage multiple concurrent workstreams independently while maintaining accuracy and meeting deadlines

 


* Develop subject matter expertise in North American privacy laws or regulations to provide support to include Canada

 


* Draft and review data protection language for third-party suppliers requiring synthesis of regulatory requirements, transfer impact assessments, business-practical judgment, and stakeholder alignment—while managing multiple concurrent priorities

Qualifications

Minimum Education and/or Experience:


* Associates degree or equivalent privacy certificate

 


* Experience reviewing contracts containing data protection language with strong problem-solving skills

 


* Working knowledge of corporate business operations

 


* Working knowledge of risk management concepts

 


* Knowledge of or experience in the staffing, outsourcing, or recruitment industry is a plus

 


* CIPP (US, C, E, or AI), CIPM, CIPT, or similar certification(s) preferred; willingness to pursue appropriate privacy certifications or already holding them, with a goal of achieving at least two certifications during the first three years of ...